registry / @promptctl/cc-candybar / 1.177.2
@promptctl/cc-candybar@1.177.2
Statusline renderer for Claude Code — a JSON5-configurable DSL with daemon-cached data sources, byte-clean palette-aware composition, and OSC8 click verbs.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe flagged execution and inspector behavior implement the package’s Claude Code statusline feature, and the attach mode is user-enabled. The reviewed network calls and local daemon subscription showed no unauthorized data collection or other attack behavior.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
The CLI is invoked; attached statusline instrumentation is enabled through the package’s user-facing setting.
Impact
The reviewed behavior supports statusline rendering and animation; no unauthorized collection or account action was identified.
Mechanism
The attach launcher uses a Unix-socket inspector connection and subscribes to the local cc-candybar daemon for statusline frames. HTTPS requests are used for package-related data.
AI rationale
The flagged execution and inspector behavior implement the package’s Claude Code statusline feature, and the attach mode is user-enabled. The reviewed network calls and local daemon subscription showed no unauthorized data collection or other attack behavior.
Evidence
~/.local/state/cc-extra/attach.log
Network endpoints2
registry.npmjs.orgraw.githubusercontent.com
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes a Claude Code statusline renderer and exposes its bundled CLI entrypoint.
- The Bun inspector attach path is described as a Unix-socket debugger connection used to modify statusline behavior.
- The attached process subscribes to the local cc-candybar daemon for statusline frames.
- The statusline attach feature is presented as an explicit setting with an on action that restarts Claude Code under the launcher.
Evidence against
- The package makes HTTPS requests to registry.npmjs.org and raw.githubusercontent.com for package-related data.
- The attach launcher instruments the Claude Code process and writes a log under the user’s state directory.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedTelemetryUrlStrings
Source & flagged code
11 flaggeddist/index.mjsView file
10contains invisible/control Unicode U+200C (zero width non-joiner)
`:case`\r`:case`\u2028`:case`\u2029`:b(),p=`default`;return;case void 0:return b(),S(`eof`)}b()},value(){switch(_){case`{`:case`[`:return S(`punctuator`,b());case`n`:return b(),C(`ull`),S(`null`,null);case`t`:return b(),C(`rue`),S(`boolean`
Critical
Trojan Source Unicode
Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
dist/index.mjsView on unpkg · L10488Trigger-reachable chain: scripts.start -> dist/index.mjs
L488: `)){n.push(r);continue}let e=r.split(`
L489: `);n.push(e[0]);for(let r=1;r<e.length;r++)t.push(n),n=[e[r]]}return t.push(n),t}function c4(e){let t=new Map;return e.map(e=>{let n=`${e.place}.${e.band}`,r=t.get(n)??0;return t.s...
L490: `}function s6(e,t){let{sessionState:n}=e,r=t.sessionId,{client:i,...a}=t.hints,o=JSON.stringify(a);n.get(r,`client-hints`)!==o&&n.set(r,R1,o);let s=l1(t.requested);n.get(r,`render-...
L491: `}const m6=new Set([`hook_event_name`,`session_id`,`session_name`,`transcript_path`,`cwd`,`model`,`workspace`,`version`,`output_style`,`cost`,`context_window`,`exceeds_200k_tokens`...
L492: `),r=+!t;for(let e=n.length-1;e>=r;e--){let t=n[e];if(!t||!_5.test(t))continue;let r=v5(t);if(r!=null)return r}return null
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.mjsView on unpkg · L488Findings
2 Critical7 High4 Medium7 Low
CriticalTrojan Source Unicodedist/index.mjs
CriticalTrigger Reachable Dangerous Capabilitydist/index.mjs
HighChild Processdist/index.mjs
HighSame File Env Network Executiondist/index.mjs
HighCommand Output Exfiltrationdist/index.mjs
HighTrigger Reachable Command Output Exfiltrationdist/index.mjs
HighKnown Malware Source Similaritydist/attach-preload.cjs
HighKnown Malware Source Similaritydist/cc-extra/src/bun-attach.js
HighKnown Malware Source Similaritydist/cc-extra/src/launch.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperplugin/bin/preview.sh
Affected versions and remediation
This report applies to @promptctl/cc-candybar@1.177.2.
See all versions of @promptctl/cc-candybar for other recorded verdicts.
- Review the evidence and your use of @promptctl/cc-candybar@1.177.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.